False Logins???

Could one of you check this version of the forum: http://www.tastyfresh.com/forum/ and let me know what would cause a false login?

What I mean by that is when you go to the login screen and enter your name and password and hit submit, it loads the forum main page again like you are logged in, but you really are not. This also happens in the admin login as well, but there you get an access denied message.

Dave R

For security reasons browsers can only read in cookies from the site that sets them, if you use URL masking browsers think that the cookie is set by another site and so can not read it back in.

The only thing you can do is connect directly through the long URL or change hosting to one that will let you use your domain name directly with your web space.

Here's an official solution. In working with my ISP, we did determine that there is infact a bug in the Web Wiz Forum code. The error is in the way the cookies are set. The following is the original code contained in login_user.asp starting with line 132.

   'Write a cookie with the User ID number so the user logged in throughout the forum
   'Write the cookie with the name Forum containing the value UserID number
   Response.Cookies("Forum")("UID") = strUserCode
   If CBool(Request.Form("ActiveUsers")) = False Then
    Response.Cookies("Forum")("Hide") = True
   Else
    Response.Cookies("Forum")("Hide") = False
   End If

This is the modified code:

   'Write a cookie with the User ID number so the user logged in throughout the forum
   'Write the cookie with the name Forum containing the value UserID number
   Response.Cookies("Forum")("UID") = strUserCode
   Response.Cookies.Item( "Forum" ).Path = "/"
   Response.Cookies.Item( "Forum" ).Domain = Request.ServerVariables( "HTTP_HOST" )
   If CBool(Request.Form("ActiveUsers")) = False Then
    Response.Cookies("Forum")("Hide") = True
   Else
    Response.Cookies("Forum")("Hide") = False
   End If

The log_off_user.asp code must also be altered starting at line 55 from:

'Clear the forum cookie on the users system so the user is no longer logged in
Response.Cookies("Forum")("UID") = strLoggedInUsername & "LOGGED-OFF"
Response.Cookies("PrForum") = ""
Session("ViRead") = ""
Response.Cookies("LPM") = ""

to this:

'Clear the forum cookie on the users system so the user is no longer logged in
Response.Cookies("Forum")("UID") = strLoggedInUsername & "LOGGED-OFF"
   Response.Cookies.Item( "Forum" ).Path = "/"
   Response.Cookies.Item( "Forum" ).Domain = Request.ServerVariables( "HTTP_HOST" )
Response.Cookies("PrForum") = ""
Session("ViRead") = ""
Response.Cookies("LPM") = ""

There may be a few other places, but once these mods have been made the forums will work properly from the correct URL.

Hopefully this code will be updated officially in a future release of the forums.